mirror of
https://github.com/mudler/LocalAI.git
synced 2026-11-06 12:33:16 -05:00
Ettore Di Giacinto
18e667cafb
The owner now serves the host access calls: read the grants, preview what an install would ask for, install or upgrade with an approval, edit or revoke the grants of one add-on, change the blanket approval and the deny rules. Every write needs the human surface mark and is refused when the deployment locks the store. Typed refusals (revision_conflict, approval_stale, blocked_by_policy, locked_by_deployment and others) cross the carrier unchanged, so every frontend gives the answer of the owner. A frontend carries the mark as a signed field of the forwarded request, and only for a host access call. The owner honors it and nothing else: a frontend with its own flags or store still forwards, and an owner without the calls is reported as unavailable with its reason. The preview issues a single-use nonce bound to the credential, the add-on, the package digest and the grants revision. The install must present it. Assisted-by: Claude:claude-sonnet-5-5 go gofmt ginkgo